NEC N8406-022 manual SNMPv3 View configuration, View-basedAccess Control Model configuration, 128>

SNMPv3 View configuration

The following table describes the SNMPv3 View Configuration commands.

Table 64 SNMPv3 View Configuration commands

Command	Description
snmp-server view <1-128>	Defines the name for a family of view subtrees up to a maximum of 32
name <1-32 characters>	characters.
	Command mode: Global configuration

snmp-server view <1-128>tree <1-32 characters>

Defines the Object Identifier (OID), a string of maximum 32 characters, which when combined with the corresponding mask defines a family of

view subtrees.

An example of an OID is 1.3.6.1.2.1.1.1.0 Command mode: Global configuration

snmp-server view <1-128>mask <1-32 characters>

Defines the bit mask, which in combination with the corresponding tree defines a family of view subtrees. The mask can have a maximum of 32 characters.

Command mode: Global configuration

snmp-server view <1-128>type {includedexcluded}

Selects whether the corresponding instances of vacmViewTreeFamilySubtree and vacmViewTreeFamilyMask define a family of view subtrees, which is included in or excluded from the MIB view.

Command mode: Global configuration

no snmp-server view <1-128>		Deletes the vacmViewTreeFamily group entry.
		Command mode: Global configuration
show	snmp-server view <1-	Displays the current vacmViewTreeFamily configuration.
128>		Command mode: All

View-based Access Control Model configuration

The view-based Access Control Model defines a set of services that an application can use for checking access rights of the user. Access control is needed when the user has to process SNMP retrieval or modification request from an SNMP entity.

The following table describes the User Access Control Configuration commands.

Table 65 View-based Access Control Configuration commands

Command	Description
snmp-server access <1-32>	Defines the name of the group, up to a maximum of 32 characters.
name <1-32 characters>	Command mode: Global configuration
snmp-server access <1-32>	Allows you to select the security model to be used.
security {usmsnmpv1snmpv2}	Command mode: Global configuration
snmp-server access <1-32>	Defines the minimum level of security required to gain access rights. The
level {noAuthNoPrivauthNo-	level noAuthNoPriv means that the SNMP message will be sent
PrivauthPriv}	without authentication and without using a privacy protocol. The level
	authNoPriv means that the SNMP message will be sent with
	authentication but without using a privacy protocol. The authPriv
	means that the SNMP message will be sent both with authentication and
	using a privacy protocol.
	Command mode: Global configuration

snmp-server access <1-32>read-view <1-32 characters>

Defines a 32 character long read view name that allows you read access to a particular MIB view. If the value is empty or if there is no active MIB view having this value then no access is granted.

Command mode: Global configuration

snmp-server access <1-32>write-view <1-32 characters>

Defines a 32 character long write view name that allows you write access to the MIB view. If the value is empty or if there is no active MIB view having this value then no access is granted.

Command mode: Global configuration

snmp-server access <1-32	Defines a 32 character long notify view name that allows you notify access
notify-view <1-32	to the MIB view.
characters>	Command mode: Global configuration
no snmp-server access <1-32>	Deletes the View-based Access Control entry.
	Command mode: Global configuration

Configuration Commands 67